Privacy policy

Last updated: October 16, 2026

This policy explains what personal data Dutch Sound Works collects through dutchsoundworks.com, why we collect it, how long we keep it, and what you can ask us to do with it. It follows the EU General Data Protection Regulation (GDPR).

Who is responsible for your data

Dutch Sound Works, Atlantisplein 1, 1093 NE Amsterdam, the Netherlands, is responsible for the personal data described here. Chamber of Commerce (KvK) number: 17229738. Email: legal (at) dutchsoundworks.com.

For any question or request about your data, send a message through the contact form and mention “privacy”. We answer within one month.

What we collect and why

When you send a brief

The contact form asks for your name, work email, company, deadline, where the work will run, the services you need, and a message. We use these details to reply, to prepare a proposal, and to plan a project if one follows. We do this because you ask us to (steps before a possible agreement) and because we have a legitimate interest in answering business enquiries.

Your brief is saved in our website and sent to us by email, so it can’t get lost if an email fails.

To keep the form safe

To stop spam, the form uses a hidden check, a short time check, and a limit on how many briefs one connection can send per hour. For that limit we store a scrambled (hashed) version of your IP address for one hour. We never store the address itself. The form may also use Cloudflare Turnstile, which looks at technical details such as your IP address and browser to tell people from bots. We do this out of a legitimate interest in keeping the site and our inbox secure.

When you visit the site

Like every website, ours runs on a server that keeps technical logs, such as IP address, browser, the page requested, and the time. Our host, Hostinger, uses these logs to keep the site running and secure, and keeps them for a limited time.

Analytics, only with your consent

With your permission, we use Google Analytics to see which pages people visit, how they find the site, and which device and country they use. We use this to improve the site. Google Analytics only loads after you choose “Accept” in the cookie banner. Advertising features and Google Signals are switched off, so the data isn’t used for ads. You can withdraw your consent at any time with “Cookies” at the bottom of every page.

Cookies

Visitors get no cookies from us until they accept analytics. This is what the site uses:

  • Your cookie choice. Saved in your browser’s local storage as “dsw_consent”, so the banner doesn’t come back on every page. It stays until you change your choice or clear your browser data.
  • Google Analytics (only after you accept). The cookies “_ga” and “_ga_” followed by a code, which tell visits apart. They last up to 2 years. If you withdraw consent, we remove them.
  • Videos. Films on case pages load only when you press play. They come from YouTube in privacy-enhanced mode or from Vimeo with tracking turned off. Once a video plays, that platform may set its own cookies under its own privacy policy.
  • Editors. People who manage this website get WordPress login cookies. Visitors don’t.

Who receives your data

We don’t sell or rent your data. We only share it with the services that run this website and our email, and only as far as they need it:

  • Hostinger, which hosts the website and stores the briefs sent through the form
  • Our email provider, which delivers briefs to us
  • Cloudflare, for spam protection on the form
  • Google, for analytics, and only with your consent

These providers process data on our behalf and under data processing terms. YouTube and Vimeo decide for themselves how they handle data once you play a video.

Data outside the EU

Google and Cloudflare are based in the United States. Both are certified under the EU-U.S. Data Privacy Framework, which the European Commission considers to offer an adequate level of protection. Where that doesn’t apply, transfers are covered by the European Commission’s standard contractual clauses.

How long we keep it

  • Briefs: as long as we need them to handle your request, and no longer than 2 years after our last contact.
  • If a project follows: for the length of the project, and invoices and administration for 7 years, as Dutch tax law requires.
  • The hashed IP address for the form limit: 1 hour.
  • Analytics data: 14 months.
  • Your cookie choice: until you change it or clear your browser data.

How we protect it

The whole site runs over an encrypted connection (HTTPS). Briefs are stored privately in the website and only the people who handle them can see them. We keep the website software up to date.

Your rights

You can ask us to:

  • show you which data we have about you
  • correct it if it’s wrong
  • delete it
  • limit how we use it, or stop using it
  • send it to you or to another party in a common format

If you gave consent, you can withdraw it at any time. Send your request through the contact form and mention “privacy”. We may ask you to confirm who you are, so we don’t share your data with someone else. We don’t use your data for automated decisions or profiling.

If you think we handle your data incorrectly, please tell us first so we can fix it. You can also file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Changes to this policy

We update this policy when the site or the law changes. The date at the top shows the latest version.